CVE-2026-24052

描述

Claude Code contained insufficient URL validation in its trusted domain verification mechanism for WebFetch requests. The application used a `startsWith()` function to validate trusted domains (e.g., `docs.python.org`, `modelcontextprotocol.io`), this could have enabled attackers to register domains like `modelcontextprotocol.io.example.com` that would pass validation. This could enable automatic requests to attacker-controlled domains without user consent, potentially leading to data exfiltration. Users on standard Claude Code auto-update have received this fix already. Users performing manual updates are advised to update to the latest version. Thank you to hackerone.com/47sid-praetorian for reporting this issue!

受影響套件(1)

• npm/@anthropic-ai/claude-codefrom 0, < 1.0.111

CVSS 分數

參考連結(3)

• ADVISORYhttps://nvd.nist.gov/vuln/detail/CVE-2026-24052
• PATCHhttps://github.com/anthropics/claude-code
• WEBhttps://github.com/anthropics/claude-code/security/advisories/GHSA-vhw5-3g5m-8ggf